CSP Cybersecurity & Digital Surveillance 5

Question 1

Which of the following best describes a 'honeyspot' or 'honeypot' used in a surveillance cybersecurity strategy?

Accepted Answer

A decoy system designed to attract and detect attackers by mimicking a real target

Answer

A honeypot is a deliberately vulnerable decoy system that lures attackers, allowing security teams to detect intrusion attempts and study attacker methods without risking real assets.

Question 2

What is the purpose of certificate pinning in a surveillance mobile viewing application?

Accepted Answer

To ensure the app only communicates with servers presenting a specific trusted certificate, preventing MitM attacks

Answer

Certificate pinning hardcodes or pins a specific server certificate in an app so it rejects any other certificate, even a valid CA-signed one, protecting against man-in-the-middle attacks.

Question 3

Under the NDAA Section 889, which action is required for federal agencies and their contractors regarding certain surveillance equipment?

Accepted Answer

Agencies must ban the purchase and use of surveillance equipment from specific Chinese manufacturers

Answer

NDAA Section 889 prohibits federal agencies and contractors from purchasing or using video surveillance equipment from certain Chinese manufacturers including Hikvision, Dahua, and Huawei due to national security concerns.

Question 4

What is the cybersecurity risk associated with using surveillance cameras that have reached 'end of life' (EOL)?

Accepted Answer

EOL cameras no longer receive security patches, leaving known vulnerabilities permanently unresolved

Answer

End-of-life devices no longer receive firmware updates or security patches from the manufacturer, meaning newly discovered vulnerabilities will never be fixed, permanently increasing attack risk.

Question 5

A surveillance operator notices that camera footage appears frozen but the timestamp continues advancing. This may indicate:

Accepted Answer

A replay or video injection attack substituting live footage with a loop

Answer

Frozen video with a running timestamp is a classic indicator of a video feed injection or replay attack, where an attacker substitutes a recording for the live camera stream.

(CSP) Certified Surveillance Professional Practice Test

(CSP) Certified Surveillance Professional Practice Test

CSP Cybersecurity & Digital Surveillance 5